Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2026

Bumps com.diffplug.spotless:spotless-plugin-gradle from 5.6.1 to 8.2.0.

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.2.0

Added

  • Add a expandWildcardImports API for java (#2679)
  • Add the ability to specify a wildcard version (*) for external formatter executables. (#2757)
  • Add support for passing multiple file paths using the -PspotlessIdeHook option. (#2774)

Fixed

  • configuration cache for groovy. (#2797)
  • [fix] NPE due to workingTreeIterator being null for git ignored files. #911 (#2771)
  • Prevent race conditions when multiple npm-based formatters launch the server process simultaneously while sharing the same node_modules directory. (#2786)

Changes

  • Bump default ktfmt version to latest 0.59 -> 0.61. (2804)
  • Bump default ktlint version to latest 1.7.1 -> 1.8.0. (2763)
  • Bump default gherkin-utils version to latest 9.2.0 -> 10.0.0. (#2619)

Gradle Plugin v8.1.0

Changes

  • Bump default ktfmt version to latest 0.58 -> 0.59. (#2681
  • Bump default jackson version to latest 2.20.0 -> 2.20.1. (#2730)
  • Bump default cleanthat version to latest 2.23 -> 2.24. (#2620)
  • POTENTIALLY BREAKING Removed support for ktlint versions below 1.0. (#2711)

Fixed

  • Tasks were being eagerly instantiated, now avoided using TaskProviders. #2719
    • POTENTIALLY BREAKING Bump minimum supported Gradle version from 7.3 to 8.1. #2719
  • Use absolute path in the git pre push hook.
  • palantirJavaFormat is no longer arbitrarily set to outdated versions on Java 17, latest available version is always used (#2686 fixes #2685)

Added

  • forbidModuleImports() API for java (#2679)
  • new options to customize Flexmark, e.g. to allow YAML front matter (#2616)

Gradle Plugin v8.0.0

Changed

  • BREAKING Bump the required Gradle to 7.3 and required Java to 17. (#2375, #2540)
  • BREAKING Renamed removeWildcardImports to forbidWildcardImports. (#2633)
  • BREAKING spotlessInstallGitPrePushHook task is now installed only on the root project. (#2570)
  • BREAKING LintSuppression now enforces unix-style paths in its setPath method. (#2629)
  • Running spotlessCheck with violations unilaterally produces the error message Run './gradlew spotlessApply' to fix these violations. (#2592)
  • Bump JGit from 6.10.1 to 7.3.0 (#2257)
    • Adds support for worktrees (fixes #1765)
  • Bump default google-java-format version to latest 1.24.0 -> 1.28.0. (#2345)
  • Bump default gson version to latest 2.13.1 -> 2.13.2. (#2615)
  • Bump default jackson version to latest 2.19.2 -> 2.20.0. (#2606)
  • Bump default ktfmt version to latest 0.53 -> 0.58 (#2613)
    • BREAKING use TrailingCommaManagementStrategy enum instead of manageTrailingCommas boolean configuration option
  • Bump default ktlint version to latest 1.5.0 -> 1.7.1. (#2555)
  • Bump default palantir-java-format version to latest 2.57.0 -> 2.71.0.

Fixed

  • Respect system gitconfig when performing git operations (#2404)
  • Fix spaceBeforeSeparator in Jackson formatter. (#2103)
  • spotlessInstallGitPrePushHook is now compatible with configuration cache. (#2570)

Added

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) from 5.6.1 to 8.2.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/5.6.1...gradle/8.2.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-plugin-gradle
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java labels Jan 23, 2026
@github-actions github-actions bot added build and removed java labels Jan 23, 2026
@github-actions
Copy link
Contributor

Checks are failing. Will not request review until checks are succeeding. If you'd like to override that behavior, comment assign set of reviewers

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 28, 2026

Superseded by #37436.

@dependabot dependabot bot closed this Jan 28, 2026
@dependabot dependabot bot deleted the dependabot/gradle/com.diffplug.spotless-spotless-plugin-gradle-8.2.0 branch January 28, 2026 04:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants